$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: icEOT5c7IifRGrLl083My/DM7JxInK1cGppKkBK/NNs= Subject key identifier: F9:56:06:1C:A6:25:22:16:0F:DC:C5:51:69:2E:0F:CF:CC:F9:42:08 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 054A Signing time: Fri 30 May 2025 23:37:38 +0000 Manifest this update: Fri 30 May 2025 23:37:38 +0000 Manifest next update: Fri 06 Jun 2025 23:37:38 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: /6QPc5MDsk4u3Q9Ow9+LdQKaXUBQiIuZwq7X7gvS4XQ=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: l/5p1WINKz3TNzRuWnRaS5/CleEw3KzqgOzzW2+y1jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: May 30 23:37:38 2025 GMT Not After : Jun 6 23:37:38 2025 GMT Subject: CN=683a4142-dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:bf:29:28:7d:f7:23:8d:36:b4:9e:69:c2: fa:4c:28:72:41:1f:c6:7a:a7:85:e5:30:27:44:b7: 47:09:45:08:42:17:77:96:04:ca:52:de:11:e6:4a: cc:ee:8b:7d:1d:e2:3a:7d:cc:6b:cc:84:8c:d6:aa: 9d:b9:58:9a:0a:08:08:12:d5:b4:16:a3:c8:df:11: a8:e9:e7:53:4b:f9:38:68:7a:a2:62:2f:88:b1:1a: f1:41:98:f7:8d:ae:0b:77:fc:d2:5b:72:d9:23:e3: 4f:6b:6c:6b:2d:c4:91:a0:cf:21:d0:80:5b:9c:d5: 36:e4:4d:d2:dd:a9:fa:82:4e:1a:17:61:e8:69:47: 3c:a6:e1:5f:6e:3e:d3:b6:1a:02:18:eb:25:ee:8b: 1d:a5:da:19:f8:9a:87:eb:14:60:ec:94:74:aa:1e: a2:11:fd:be:1c:0d:e2:cf:2e:5e:75:be:0d:ed:4f: 74:4f:96:02:de:06:ad:60:68:60:16:39:7d:c3:2c: 36:54:0e:d5:a1:e4:95:9f:a2:6c:e0:1d:ab:01:2d: e4:b2:fa:76:02:0a:ef:66:9d:5e:c2:58:76:c5:0d: ea:45:f5:94:43:7d:9a:ba:c0:9b:18:0e:c9:91:8f: 27:6d:09:e4:a2:d9:5c:20:7c:df:b9:8f:61:43:a6: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:06:1C:A6:25:22:16:0F:DC:C5:51:69:2E:0F:CF:CC:F9:42:08 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:30:b8:27:c2:44:5f:43:52:5b:31:d1:13:da:c3:31:7b:36: 65:49:8a:85:b6:56:3f:3e:41:33:71:10:4a:87:08:e2:10:e8: 78:47:04:de:b4:2e:48:93:b2:ed:a4:25:1d:d3:5b:4d:d9:8b: c9:8a:f9:11:29:bb:d5:76:4a:d1:40:b3:01:52:74:2c:b4:03: f4:4a:25:d5:fb:c0:e2:6a:12:84:14:41:54:40:d6:ee:61:b3: 9a:b2:05:4a:fc:f0:7a:54:7d:2e:68:49:4f:39:02:1e:d5:ea: 59:3a:3a:54:21:0e:86:c7:8a:55:0f:72:2f:0f:68:f9:ee:fd: dd:43:cc:a6:67:80:45:42:ac:56:98:a8:e6:81:18:c7:34:f8: 5a:1f:5b:80:59:df:26:13:b9:2a:f7:d5:87:56:72:23:c2:d2: 9c:88:5a:c2:68:74:94:b3:31:8c:03:08:c6:e3:e9:75:b9:6d: c2:77:8d:dd:36:38:a3:5c:54:ff:18:e5:10:c1:77:ae:c0:8a: 36:ed:da:45:7e:56:ff:6b:c3:55:16:cd:47:dc:03:e9:de:5d: 23:5f:d4:03:54:77:c5:5b:9f:0c:c7:72:fa:52:8c:29:fa:9f: 2d:08:b8:aa:ce:e2:9e:3e:3a:3d:7c:f7:43:04:00:c0:c4:af: 5f:3c:a0:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwNTMwMjMzNzM4WhcNMjUwNjA2MjMzNzM4WjAYMRYwFAYD VQQDEw02ODNhNDE0Mi1kYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xW/KSh99yONNrSeacL6TChyQR/GeqeF5TAnRLdHCUUIQhd3lgTKUt4R5krM 7ot9HeI6fcxrzISM1qqduViaCggIEtW0FqPI3xGo6edTS/k4aHqiYi+IsRrxQZj3 ja4Ld/zSW3LZI+NPa2xrLcSRoM8h0IBbnNU25E3S3an6gk4aF2HoaUc8puFfbj7T thoCGOsl7osdpdoZ+JqH6xRg7JR0qh6iEf2+HA3izy5edb4N7U90T5YC3gatYGhg Fjl9wyw2VA7VoeSVn6Js4B2rAS3ksvp2AgrvZp1ewlh2xQ3qRfWUQ32ausCbGA7J kY8nbQnkotlcIHzfuY9hQ6Yb1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlWBhym JSIWD9zFUWkuD8/M+UIIMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApMLgnwkRfQ1JbMdET2sMxezZlSYqFtlY/PkEzcRBKhwjiEOh4RwTe tC5Ik7LtpCUd01tN2YvJivkRKbvVdkrRQLMBUnQstAP0SiXV+8DiahKEFEFUQNbu YbOasgVK/PB6VH0uaElPOQIe1epZOjpUIQ6Gx4pVD3IvD2j57v3dQ8ymZ4BFQqxW mKjmgRjHNPhaH1uAWd8mE7kq99WHVnIjwtKciFrCaHSUszGMAwjG4+l1uW3Cd43d NjijXFT/GOUQwXeuwIo27dpFflb/a8NVFs1H3APp3l0jX9QDVHfFW58Mx3L6Uowp +p8tCLiqzuKePjo9fPdDBADAxK9fPKA7 -----END CERTIFICATE-----Generated at Sat May 31 17:40:58 2025 by rpki-client